Certificates, trust and the long tail
Posted in Computer Forensics, Methodology, Security Architecture, Technology on Oct 21st, 2026
Last Friday a researcher reported that the private keys of eight intermediate certificates from a certificate authority were broken. Not stolen. Broken. They had been generated with almost no randomness, so anyone could calculate them from the public certificate. The private keys had values between 4 and 237. A normal key for that curve has […]